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Abstract 

! 
| 

The present invention relates to a method for the secure 

5 access of mobile terminal to the Wireless Local Area Network 
(WLAN) and for secure data communication via wireless link, 
which, combining th$ common key encryption technology and the 
symmetry encryption technology, has resolved the failure in 
WLAN to provide effective control on secure MT access, and 

10 overcome the limitation on the confidentiality of the data 
communication via vHreless link. When MT logs on AP, both 
parts must perform the certificate authentication through AS. 
Only the MT holding the legitimate certificate can access to AP 
holing the legitimate! certificate; MT and AP perform the 

15 negotiation of commjan key for conversation, complete the 

dynamic revision of the secret key in each authentication, each 
secret key and in the 1 process of conversation to achieve 
confidential data communication. Anyway, the method has not 
only achieved control on the access of MT, but also ensured the 

20 security of MT accesjs and high confidentiality of communication. 
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1 . . .BOTHWAY CERTIFICATE 

AUTHENTICATION 
2. . CONSULT CONVERSATION 

KEY 

3 . . .SWITCH IN AUTHENTICATION 

REQUEST ( ) 
4. . .SWITCH IN AUTHENTICATION 

RESPONSE () 
5... CERTIFICATE AUTHENTICATION 

REQUEST () 
6. . .CERTIFICATE AUTHENTICATION 

RESPONSE () 
7., .CONSULT KEY REQUEST ( ) 
8. . .CONSULT KEY RESPONSE ( ) 
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Abstract^A method for the access of the mobile terminal to the WLAN and for the data communication via the wireless 
link^e^r^Through the combination of the public key technology and the symmetrical key technology, the method can make 
secure access control for the mobile terminal to the WLAN and overcome the secret localization of the data communication via 
the wireless link. When the mobile terminal wants to enter the access point, both sides should authenticate the certificate each 
other. Only when both sides have the legitimate certificate, the mobile terminal can enter the access point. In order to realize the 
secure data communication, the mobile terminal and the access point consult the secret key for communication together, give a 
key for each authentication and amend the key in the conversation process. Anyhow, this method not only realizes the access 
control of the mobile terminal, but also ensures the security of the access control for the mobile terminal and the high privacy of 
the communication. 



